[info] Using makefile-style concurrent boot in runlevel 2. [ 27.241667] audit: type=1800 audit(1545651023.796:21): pid=5863 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="bootlogs" dev="sda1" ino=2419 res=0 [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] startpar: service(s) returned failure: rsyslog ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 32.172136] sshd (6023) used greatest stack depth: 15728 bytes left Warning: Permanently added '10.128.0.31' (ECDSA) to the list of known hosts. 2018/12/24 11:30:35 fuzzer started 2018/12/24 11:30:37 dialing manager at 10.128.0.26:34681 [ 41.228085] collect2 (6047) used greatest stack depth: 15200 bytes left 2018/12/24 11:30:38 syscalls: 1 2018/12/24 11:30:38 code coverage: enabled 2018/12/24 11:30:38 comparison tracing: enabled 2018/12/24 11:30:38 setuid sandbox: enabled 2018/12/24 11:30:38 namespace sandbox: enabled 2018/12/24 11:30:38 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/24 11:30:38 fault injection: enabled 2018/12/24 11:30:38 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/24 11:30:38 net packet injection: enabled 2018/12/24 11:30:38 net device setup: enabled 11:33:34 executing program 0: [ 218.137834] IPVS: ftp: loaded support on port[0] = 21 11:33:34 executing program 1: [ 218.437802] IPVS: ftp: loaded support on port[0] = 21 11:33:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) seccomp(0x1, 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00', &(0x7f00000001c0)='ppp0&vmnet1\xdeeth1\x00', 0x11, 0x2) syz_open_procfs(0x0, &(0x7f0000000300)='syscall\x00') sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00'}, 0x18) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00'}, 0x18) getpriority(0x1, 0x0) semget(0xffffffffffffffff, 0x3, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) [ 218.758176] IPVS: ftp: loaded support on port[0] = 21 11:33:35 executing program 3: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000002740)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000002680)) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x9, &(0x7f0000000400)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, 0x0, 0x40) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000002c0)=0x7, 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 219.186636] IPVS: ftp: loaded support on port[0] = 21 11:33:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000400)=[@acquire_done], 0x0, 0x0, 0x0}) 11:33:36 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0xef, &(0x7f00000002c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000900)={0x0, 0x800000000000000, 0x0, 0x0, 0x1, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}]}) [ 219.653475] IPVS: ftp: loaded support on port[0] = 21 [ 219.895007] IPVS: ftp: loaded support on port[0] = 21 [ 219.908500] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.917028] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.924526] device bridge_slave_0 entered promiscuous mode [ 220.077947] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.092626] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.126364] device bridge_slave_1 entered promiscuous mode [ 220.238267] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 220.359055] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 220.637273] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.643723] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.665745] device bridge_slave_0 entered promiscuous mode [ 220.788769] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.796121] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.812343] device bridge_slave_1 entered promiscuous mode [ 220.850754] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 220.964420] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 221.020899] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 221.133433] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.146221] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.155653] device bridge_slave_0 entered promiscuous mode [ 221.190917] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 221.341356] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.356090] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.363565] device bridge_slave_1 entered promiscuous mode [ 221.515314] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 221.535795] team0: Port device team_slave_0 added [ 221.569087] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 221.581777] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 221.613380] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.628639] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.636733] device bridge_slave_0 entered promiscuous mode [ 221.655757] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 221.663302] team0: Port device team_slave_1 added [ 221.701331] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 221.753154] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 221.762964] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.777958] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.785843] device bridge_slave_1 entered promiscuous mode [ 221.808141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.909697] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 221.943845] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.973325] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.991331] device bridge_slave_0 entered promiscuous mode [ 222.006300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.019229] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 222.058230] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 222.088310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.106710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.146695] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.166786] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.182637] device bridge_slave_1 entered promiscuous mode [ 222.193913] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 222.211462] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 222.232662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.257727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.289186] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.295542] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.322328] device bridge_slave_0 entered promiscuous mode [ 222.344869] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 222.362552] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 222.390487] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 222.417024] team0: Port device team_slave_0 added [ 222.442539] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 222.465644] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 222.477337] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.483706] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.507484] device bridge_slave_1 entered promiscuous mode [ 222.524371] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 222.542324] team0: Port device team_slave_1 added [ 222.558029] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 222.564881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.580613] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 222.660637] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 222.677239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 222.686747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.710373] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 222.725085] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 222.735631] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 222.773995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 222.807186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.817803] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 222.830614] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 222.874812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 222.887039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.929402] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 223.011075] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 223.031901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.057043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.111989] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 223.122110] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 223.155836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.170189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.213276] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 223.220861] team0: Port device team_slave_0 added [ 223.230787] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 223.251523] team0: Port device team_slave_0 added [ 223.306617] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 223.366425] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 223.373363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.403110] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 223.432929] team0: Port device team_slave_1 added [ 223.454819] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 223.476534] team0: Port device team_slave_1 added [ 223.511644] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 223.575231] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 223.593930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.616991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.628311] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 223.639909] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 223.683582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.696765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.713008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.740923] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 223.768152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.786524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.824255] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 223.837721] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.844197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.851263] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.857661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.865481] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 223.874527] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 223.884033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.894325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.923126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.942463] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 223.950123] team0: Port device team_slave_0 added [ 223.956602] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 223.972482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.988850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.035385] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 224.056660] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 224.063787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.073889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.116532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.141515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.159218] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 224.166917] team0: Port device team_slave_1 added [ 224.192360] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 224.227710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.237133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.276582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.309204] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 224.323690] team0: Port device team_slave_0 added [ 224.334041] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 224.354611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.377343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.435742] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 224.442952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.476756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.489691] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 224.504648] team0: Port device team_slave_1 added [ 224.540167] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 224.570847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.581208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.657651] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 224.665077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.682581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.699270] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 224.727622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.746638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.860759] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.867185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.873843] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.880277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.910480] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 224.944800] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 224.969315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.979651] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.068406] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 225.075671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.094759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.177200] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 225.184352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.205728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.286292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.602018] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.608473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.615182] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.621650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.650730] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 225.783978] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.790436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.797153] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.803556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.830940] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 226.137615] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.144004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.150716] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.157130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.168871] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 226.366079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.373320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.420068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.614668] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.621102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.627844] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.634242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.647532] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 227.414736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.163970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.620135] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 230.160826] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 230.186106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.194213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.241099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.516315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.661842] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 230.764078] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.838585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.980833] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 231.192152] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 231.216716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.237650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.339945] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 231.354521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.369898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.422186] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 231.432104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.716432] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.780482] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.807649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.944588] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 231.954002] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 231.968573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.984303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 232.253452] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 232.394207] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 232.404452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.427231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 232.445377] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.697556] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 232.703725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.718457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 232.844048] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.256476] 8021q: adding VLAN 0 to HW filter on device team0 11:33:50 executing program 0: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) syz_execute_func(&(0x7f00000002c0)="65260f18800000000064ff0941c3c4e2c9975842c4c27d794e00c401fa2cce3e0f1110c442019dccd3196ea3") execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10a) dup2(r0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200800000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, 0x0, &(0x7f0000000200)) 11:33:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r0, &(0x7f0000000480), 0x27b, 0x0) [ 234.398535] hrtimer: interrupt took 33352 ns 11:33:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'ip_vti0\x00\x1e\x00', 0x800201e}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@dev, 0x0, r2}) 11:33:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x1f000000) 11:33:51 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000280)=""/190, 0xbe}], 0x100000000000021c}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0) 11:33:51 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="020700000200000000000000000000005694c13af5a263559fcdeb5a5f4e3dd518fb9b6835ea94e07f9adca3c856efbc731100000000000052a30dfadbf916effbf5145f69daa53f70519ed60e0b0dc33e56978d26f13e8d9af3e5504b0ee31d4ac6a4cca6c0135bf791d813bbd29db932619681fef8f87424d173b0f6d5f2739238fd83b708b9382c969c0f8774c3116cec57d2c5cfe0853226c5346d7dddda835a98141288b2160df0c7181ae919721b91aa26e750d2ae5490c1c599634aab582e06c7"], 0xc4}}, 0x0) 11:33:51 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000280)=""/190, 0xbe}], 0x100000000000021c}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0) 11:33:51 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0x10000039f) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f00000005c0)=0xc) lstat(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000700)) getpgrp(0x0) geteuid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000780)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getuid() getresgid(&(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000000940)) [ 235.194226] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 235.208616] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 0, id = 0 11:33:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) seccomp(0x1, 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00', &(0x7f00000001c0)='ppp0&vmnet1\xdeeth1\x00', 0x11, 0x2) syz_open_procfs(0x0, &(0x7f0000000300)='syscall\x00') sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00'}, 0x18) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00'}, 0x18) getpriority(0x1, 0x0) semget(0xffffffffffffffff, 0x3, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) 11:33:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000280)=""/190, 0xbe}], 0x100000000000021c}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) [ 235.762250] binder: 7646:7647 unknown command 536871488 [ 235.783851] binder: 7646:7647 ioctl c0306201 20000440 returned -22 [ 235.804343] binder: 7646:7647 BC_ACQUIRE_DONE u0000000000000000 no match [ 235.832123] binder_alloc: binder_alloc_mmap_handler: 7646 20001000-20004000 already mapped failed -16 [ 235.856771] binder: 7646:7654 unknown command 536871488 [ 235.862174] binder: 7646:7654 ioctl c0306201 20000440 returned -22 11:33:52 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000000100)) 11:33:52 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000140)='abmxnet00xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) seccomp(0x1, 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00', &(0x7f00000001c0)='ppp0&vmnet1\xdeeth1\x00', 0x11, 0x2) syz_open_procfs(0x0, &(0x7f0000000300)='syscall\x00') sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00'}, 0x18) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00'}, 0x18) getpriority(0x1, 0x0) semget(0xffffffffffffffff, 0x3, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) 11:33:52 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="020700000200000000000000000000005694c13af5a263559fcdeb5a5f4e3dd518fb9b6835ea94e07f9adca3c856efbc731100000000000052a30dfadbf916effbf5145f69daa53f70519ed60e0b0dc33e56978d26f13e8d9af3e5504b0ee31d4ac6a4cca6c0135bf791d813bbd29db932619681fef8f87424d173b0f6d5f2739238fd83b708b9382c969c0f8774c3116cec57d2c5cfe0853226c5346d7dddda835a98141288b2160df0c7181ae919721b91aa26e750d2ae5490c1c599634aab582e06c7"], 0xc4}}, 0x0) 11:33:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) 11:33:52 executing program 0: r0 = socket(0x1, 0x1, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0xfffffffffffffd3b) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="3fd3d93ff1fa8cd6bac141234788b429", 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) 11:33:52 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000040)="b9800000c00f3235001000000f30f24c0f2c49e8426dc4027d3493b80800003626660f7e676d660f1678b06cc403f9dfbeb70000000bc7442400f5000000c744240284d178bcff1c24f2f347dbe1", 0x4e}], 0x1, 0x48, 0x0, 0x0) llistxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:33:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000300), 0x0) write(r1, &(0x7f0000000540)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) write$FUSE_DIRENT(r1, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 11:33:52 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='reno\x00', 0xff27) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x20000000, 0x0, 0x0) shutdown(r0, 0x1) 11:33:52 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x208204) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000140)={0xa0}, 0xa0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000003700)={0x0, 0x40000000000006, 0x0, 0x0, 0xca}) 11:33:52 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) seccomp(0x1, 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00', &(0x7f00000001c0)='ppp0&vmnet1\xdeeth1\x00', 0x11, 0x2) syz_open_procfs(0x0, &(0x7f0000000300)='syscall\x00') sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00'}, 0x18) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00'}, 0x18) getpriority(0x1, 0x0) semget(0xffffffffffffffff, 0x3, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) [ 236.191498] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 11:33:52 executing program 1: syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 11:33:52 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) timer_create(0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getgid() listen(r1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) fadvise64(r2, 0x0, 0x0, 0x0) 11:33:52 executing program 4: 11:33:52 executing program 3: 11:33:52 executing program 1: [ 236.380869] ================================================================== [ 236.388470] BUG: KASAN: slab-out-of-bounds in fpstate_init+0x50/0x160 [ 236.395067] Write of size 832 at addr ffff8881cc65ebc0 by task syz-executor0/7711 [ 236.402689] [ 236.404336] CPU: 1 PID: 7711 Comm: syz-executor0 Not tainted 4.20.0-rc6-next-20181217+ #172 [ 236.412829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.422189] Call Trace: [ 236.424858] dump_stack+0x244/0x39d [ 236.428540] ? dump_stack_print_info.cold.1+0x20/0x20 [ 236.433758] ? printk+0xa7/0xcf [ 236.437047] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 236.437110] print_address_description.cold.4+0x9/0x1ff [ 236.437131] ? fpstate_init+0x50/0x160 [ 236.437147] kasan_report.cold.5+0x1b/0x39 [ 236.455466] ? fpstate_init+0x50/0x160 [ 236.459368] ? fpstate_init+0x50/0x160 [ 236.463286] check_memory_region+0x13e/0x1b0 [ 236.467707] memset+0x23/0x40 [ 236.470828] fpstate_init+0x50/0x160 [ 236.474613] kvm_arch_vcpu_init+0x3e9/0x870 11:33:53 executing program 1: 11:33:53 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x3) [ 236.479002] kvm_vcpu_init+0x2fa/0x420 [ 236.482913] ? vcpu_stat_get+0x300/0x300 [ 236.487023] ? kmem_cache_alloc+0x33f/0x730 [ 236.491429] vmx_create_vcpu+0x1b7/0x2695 [ 236.495602] ? vmx_exec_control+0x210/0x210 [ 236.499939] ? kasan_check_write+0x14/0x20 [ 236.504232] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 236.509178] ? wait_for_completion+0x8a0/0x8a0 [ 236.513836] ? print_usage_bug+0xc0/0xc0 [ 236.517939] kvm_arch_vcpu_create+0xe5/0x220 [ 236.522364] ? kvm_arch_vcpu_free+0x90/0x90 [ 236.522402] kvm_vm_ioctl+0x526/0x2030 [ 236.522426] ? kvm_unregister_device_ops+0x70/0x70 [ 236.522454] ? mark_held_locks+0x130/0x130 [ 236.535569] ? __lock_acquire+0x62f/0x4c20 [ 236.535607] ? __lock_acquire+0x62f/0x4c20 [ 236.535640] ? mark_held_locks+0x130/0x130 [ 236.552536] ? graph_lock+0x270/0x270 [ 236.556369] ? find_held_lock+0x36/0x1c0 [ 236.560479] ? __fget+0x4aa/0x740 [ 236.563942] ? lock_downgrade+0x900/0x900 [ 236.568128] ? check_preemption_disabled+0x48/0x280 [ 236.573165] ? kasan_check_read+0x11/0x20 [ 236.577373] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 236.577405] ? rcu_read_unlock_special+0x370/0x370 [ 236.577433] ? __fget+0x4d1/0x740 [ 236.577457] ? ksys_dup3+0x680/0x680 [ 236.577524] ? __might_fault+0x12b/0x1e0 [ 236.591117] ? lock_downgrade+0x900/0x900 [ 236.591140] ? lock_release+0xa00/0xa00 [ 236.591209] ? perf_trace_sched_process_exec+0x860/0x860 [ 236.591228] ? kvm_unregister_device_ops+0x70/0x70 [ 236.617526] do_vfs_ioctl+0x1de/0x1790 [ 236.621439] ? ioctl_preallocate+0x300/0x300 [ 236.625861] ? __fget_light+0x2e9/0x430 [ 236.629846] ? fget_raw+0x20/0x20 [ 236.629894] ? _copy_to_user+0xc8/0x110 [ 236.629966] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 236.637401] ? put_timespec64+0x10f/0x1b0 [ 236.637424] ? finish_task_switch+0x1f4/0x910 [ 236.637442] ? nsecs_to_jiffies+0x30/0x30 [ 236.637473] ? do_syscall_64+0x9a/0x820 [ 236.637490] ? do_syscall_64+0x9a/0x820 [ 236.637507] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 236.668341] ? security_file_ioctl+0x94/0xc0 [ 236.672769] ksys_ioctl+0xa9/0xd0 [ 236.676246] __x64_sys_ioctl+0x73/0xb0 [ 236.680147] do_syscall_64+0x1b9/0x820 [ 236.684047] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 236.689435] ? syscall_return_slowpath+0x5e0/0x5e0 [ 236.694449] ? trace_hardirqs_on_caller+0x310/0x310 [ 236.699486] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 236.704567] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 236.711251] ? __switch_to_asm+0x40/0x70 [ 236.715325] ? __switch_to_asm+0x34/0x70 [ 236.719415] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 236.724281] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 236.729489] RIP: 0033:0x457669 [ 236.732695] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 236.751615] RSP: 002b:00007ff6fe434c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.759326] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 236.766602] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000008 [ 236.773876] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 236.781154] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6fe4356d4 [ 236.781164] R13: 00000000004c00ff R14: 00000000004d1170 R15: 00000000ffffffff [ 236.781188] [ 236.781196] Allocated by task 7711: [ 236.781210] save_stack+0x43/0xd0 [ 236.781222] kasan_kmalloc+0xcb/0xd0 [ 236.781234] kasan_slab_alloc+0x12/0x20 [ 236.781254] kmem_cache_alloc+0x130/0x730 [ 236.816259] vmx_create_vcpu+0x110/0x2695 [ 236.820401] kvm_arch_vcpu_create+0xe5/0x220 [ 236.824795] kvm_vm_ioctl+0x526/0x2030 [ 236.828669] do_vfs_ioctl+0x1de/0x1790 [ 236.832540] ksys_ioctl+0xa9/0xd0 [ 236.835997] __x64_sys_ioctl+0x73/0xb0 [ 236.839898] do_syscall_64+0x1b9/0x820 [ 236.843774] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 236.848947] [ 236.850570] Freed by task 0: [ 236.853565] (stack is not available) [ 236.857254] [ 236.858867] The buggy address belongs to the object at ffff8881cc65eb80 [ 236.858867] which belongs to the cache x86_fpu of size 832 [ 236.871159] The buggy address is located 64 bytes inside of [ 236.871159] 832-byte region [ffff8881cc65eb80, ffff8881cc65eec0) [ 236.882926] The buggy address belongs to the page: [ 236.887839] page:ffffea0007319780 count:1 mapcount:0 mapping:ffff8881d5070940 index:0x0 [ 236.895966] flags: 0x2fffc0000000200(slab) [ 236.900212] raw: 02fffc0000000200 ffff8881d506f448 ffff8881d506f448 ffff8881d5070940 [ 236.908128] raw: 0000000000000000 ffff8881cc65e040 0000000100000004 0000000000000000 [ 236.915994] page dumped because: kasan: bad access detected [ 236.921694] [ 236.923299] Memory state around the buggy address: [ 236.928211] ffff8881cc65ed80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 236.935551] ffff8881cc65ee00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 236.942895] >ffff8881cc65ee80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 236.950246] ^ [ 236.955681] ffff8881cc65ef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 236.963022] ffff8881cc65ef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 236.970361] ================================================================== [ 236.977702] Disabling lock debugging due to kernel taint [ 236.996498] Kernel panic - not syncing: panic_on_warn set ... [ 237.001078] kobject: 'loop2' (00000000b821d913): kobject_uevent_env [ 237.002420] CPU: 1 PID: 7711 Comm: syz-executor0 Tainted: G B 4.20.0-rc6-next-20181217+ #172 [ 237.011644] kobject: 'loop2' (00000000b821d913): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 237.018676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.018682] Call Trace: [ 237.018701] dump_stack+0x244/0x39d [ 237.018718] ? dump_stack_print_info.cold.1+0x20/0x20 [ 237.018738] ? fpstate_init+0x30/0x160 [ 237.052800] panic+0x2ad/0x632 [ 237.056023] ? add_taint.cold.5+0x16/0x16 [ 237.060169] ? preempt_schedule+0x4d/0x60 [ 237.064304] ? ___preempt_schedule+0x16/0x18 [ 237.068698] ? trace_hardirqs_on+0xb4/0x310 [ 237.073004] ? fpstate_init+0x50/0x160 [ 237.076888] end_report+0x47/0x4f [ 237.080329] kasan_report.cold.5+0xe/0x39 [ 237.084468] ? fpstate_init+0x50/0x160 [ 237.088356] ? fpstate_init+0x50/0x160 [ 237.092231] check_memory_region+0x13e/0x1b0 [ 237.096627] memset+0x23/0x40 [ 237.099716] fpstate_init+0x50/0x160 [ 237.103422] kvm_arch_vcpu_init+0x3e9/0x870 [ 237.107749] kvm_vcpu_init+0x2fa/0x420 [ 237.111624] ? vcpu_stat_get+0x300/0x300 [ 237.115674] ? kmem_cache_alloc+0x33f/0x730 [ 237.119989] vmx_create_vcpu+0x1b7/0x2695 [ 237.124176] ? vmx_exec_control+0x210/0x210 [ 237.128495] ? kasan_check_write+0x14/0x20 [ 237.132725] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 237.137638] ? wait_for_completion+0x8a0/0x8a0 [ 237.142214] ? print_usage_bug+0xc0/0xc0 [ 237.146279] kvm_arch_vcpu_create+0xe5/0x220 [ 237.150674] ? kvm_arch_vcpu_free+0x90/0x90 [ 237.155011] kvm_vm_ioctl+0x526/0x2030 [ 237.158907] ? kvm_unregister_device_ops+0x70/0x70 [ 237.163850] ? mark_held_locks+0x130/0x130 [ 237.168081] ? __lock_acquire+0x62f/0x4c20 [ 237.172305] ? __lock_acquire+0x62f/0x4c20 [ 237.176529] ? mark_held_locks+0x130/0x130 [ 237.180751] ? graph_lock+0x270/0x270 [ 237.184543] ? find_held_lock+0x36/0x1c0 [ 237.188591] ? __fget+0x4aa/0x740 [ 237.192028] ? lock_downgrade+0x900/0x900 [ 237.196170] ? check_preemption_disabled+0x48/0x280 [ 237.201181] ? kasan_check_read+0x11/0x20 [ 237.205316] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 237.210576] ? rcu_read_unlock_special+0x370/0x370 [ 237.215492] ? __fget+0x4d1/0x740 [ 237.218943] ? ksys_dup3+0x680/0x680 [ 237.222643] ? __might_fault+0x12b/0x1e0 [ 237.226692] ? lock_downgrade+0x900/0x900 [ 237.230828] ? lock_release+0xa00/0xa00 [ 237.234788] ? perf_trace_sched_process_exec+0x860/0x860 [ 237.240224] ? kvm_unregister_device_ops+0x70/0x70 [ 237.245140] do_vfs_ioctl+0x1de/0x1790 [ 237.249026] ? ioctl_preallocate+0x300/0x300 [ 237.253435] ? __fget_light+0x2e9/0x430 [ 237.257405] ? fget_raw+0x20/0x20 [ 237.260846] ? _copy_to_user+0xc8/0x110 [ 237.264809] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 237.270332] ? put_timespec64+0x10f/0x1b0 [ 237.274467] ? finish_task_switch+0x1f4/0x910 [ 237.278947] ? nsecs_to_jiffies+0x30/0x30 [ 237.283091] ? do_syscall_64+0x9a/0x820 [ 237.287049] ? do_syscall_64+0x9a/0x820 [ 237.291009] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 237.295625] ? security_file_ioctl+0x94/0xc0 [ 237.300022] ksys_ioctl+0xa9/0xd0 [ 237.303460] __x64_sys_ioctl+0x73/0xb0 [ 237.307336] do_syscall_64+0x1b9/0x820 [ 237.311209] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 237.316558] ? syscall_return_slowpath+0x5e0/0x5e0 [ 237.321476] ? trace_hardirqs_on_caller+0x310/0x310 [ 237.326487] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 237.331503] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 237.338161] ? __switch_to_asm+0x40/0x70 [ 237.342221] ? __switch_to_asm+0x34/0x70 [ 237.346269] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 237.351106] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 237.356297] RIP: 0033:0x457669 [ 237.359491] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 237.378391] RSP: 002b:00007ff6fe434c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 237.386101] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 237.393376] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000008 [ 237.400645] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 237.407898] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6fe4356d4 [ 237.415157] R13: 00000000004c00ff R14: 00000000004d1170 R15: 00000000ffffffff [ 237.423422] Kernel Offset: disabled [ 237.427043] Rebooting in 86400 seconds..